8.8Alta
WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability
10Web 10Web Social Photo Feed
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Vulnerabilidades de 10web (CVE)
Registros CVE publicados para 10web, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 18Photo Gallery by 10Web – Mobile-Friendly Image Gallery 15photo_gallery 10slider 9form_maker 8Photo Gallery by 10Web 610Web Booster – Website speed optimization, Cache & Page Speed optimizer 5PhotoGallery 5Slider by 10Web 510Web Map Builder for Google Maps 3Form Maker by 10Web 310Web Social Photo Feed 210WebAnalytics 2map_builder_for_google_maps 2SEO by 10Web 110Web Social Post Feed 1Slider by 10Web – Responsive Image Slider 1WD WidgetTwitter 1WDContactFormBuilder 110Web AI Assistant – AI content writing assistant 110web booster 1
7.5Alta
10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() …
6.1Media
Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 1.8.42 due to insufficient input sanitization and output escaping. …
9.8Crítica
10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation…
7.5Alta
Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied par…
7.1Alta
WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
10Web Photo Gallery by 10Web
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
7.1Alta
WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
10Web Slider by 10Web
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
8.8Alta
WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
10Web Slider by 10Web
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62.
7.2Alta
10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 2.34.8 due to insufficient input sanitization and o…
6.1Media
Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'inputs (array key)' parameter in all versions up to, and including, 1.15.48 due to insufficient input sani…
7.6Alta
WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
10Web Slider by 10Web
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
6.5Media
WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
10Web 10Web Social Photo Feed
Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
6.1Media
Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thumb_url' parameter in all versions up to, and including, 1.8.46 due to insufficient input sanitization and output escapi…
7.2Alta
Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields in all versions up to, and including, 1.15.47 due to insufficient input sani…
8.8Alta
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
10Web Photo Gallery by 10Web
Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions.
8.8Alta
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
10Web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer
Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions.
6.5Media
Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'album_id' Shortcode Attribute in all versions up to, and including, 1.8.44 due to insufficient escaping on the user supplied paramet…
6.4Media
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and including, 1.8.44 due to insufficient input sanitization and output escaping. …
6.1Media
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and including, 1.15.46 due to insufficient input sanitization …
7.1Alta
WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
10Web Form Maker by 10Web
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.49.
7.4Alta
WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
10Web Slider by 10Web
Cross-Site Request Forgery (CSRF) vulnerability in 10Web Slider by 10Web slider-wd allows Cross Site Request Forgery.This issue affects Slider by 10Web: from n/a through 1.2.63.
5.3Media
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause in all versions up to, and including, 1.15.44 due to insuffi…
4.9Media
Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'groupids' parameter in all versions up to, and including, 1.15.43 due to insufficient escaping on the user supplied…
4.9Media
Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'name' parameter in all versions up to, and including, 1.15.43 due to insufficient escaping on the user supplied par…
9.3Crítica
WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
10Web Form Maker by 10Web
Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.